PRIVACY POLICY

POLYMER WEEK & POLYMER WEEK SOCIETY

Last updated: August 2026

This Privacy Policy explains how Polymer Week Studio s.r.o. processes personal data in connection with www.polymerweek.com, www.polymerweeksociety.com, online purchases, customer accounts, digital content, courses, subscriptions, memberships, events and related customer communications.

1. Data Controller

The controller of your personal data is:

Polymer Week Studio s.r.o.
Pecháčkova 952/24
318 00 Plzeň
Czech Republic

Company ID (IČO): 08369607
VAT ID (DIČ): CZ08369607

Privacy and Customer Contact:
support@polymerweek.com
hello@polymerweek.com

2. Personal Data We Process

Depending on how you interact with us, we may process the following categories of personal data.

Identification and Contact Data

name;
billing address;
shipping address;
email address;
telephone number;
country;
Company ID, VAT ID or business details where applicable.

Order and Contract Data

products and services ordered;
order history;
prices and discounts;
delivery method;
payment status;
invoices;
returns;
complaints;
refunds;
customs information where required.

Account, Course and Membership Data

account information;
subscription or membership status;
course registrations;
digital content access;
course and purchase history;
account settings.

Event Data

event registrations;
ticket information;
participant information necessary to organise or provide the event.

Payment Data

We process information relating to payment status and payment transactions.

Payment card details are generally entered directly into systems operated by payment service providers. We do not store complete payment card numbers where the transaction is processed directly by those providers.

Communications

We may process emails, customer-support requests, complaints and other communications exchanged with you.

Technical and Usage Data

When you use our websites, we may process:

IP address;
device information;
browser information;
operating system;
security and server logs;
website interactions;
cookie identifiers and similar technical identifiers;
consent and cookie-preference records.

Non-essential tracking technologies are used only in accordance with the requirements described in Section 9.

3. Purposes and Legal Bases

We process personal data only where a legal basis exists.

Performance of a Contract

We process data where necessary to:

process orders;
receive and verify payments;
deliver goods;
provide access to digital content and courses;
administer subscriptions and memberships;
manage customer accounts;
register participants for events;
communicate about an order, service or event;
process returns, refunds and contractual claims.

The legal basis is the necessity of processing for performance of a contract or for steps requested before entering into a contract.

Legal Obligations

We process data where necessary to comply with legal obligations, including:

accounting and tax obligations;
VAT requirements;
customs requirements;
consumer-protection obligations;
obligations relating to complaints and contractual records;
obligations imposed by competent public authorities.

Legitimate Interests

Where appropriate and permitted by law, we process data on the basis of our legitimate interests, including:

protecting our websites, accounts and systems;
preventing and investigating fraud, abuse and security incidents;
protecting and enforcing legal claims;
maintaining necessary business and contractual records;
responding to customer enquiries;
improving internal business processes;
protecting our property and legal rights; and
direct marketing of our own similar products and services to existing customers where permitted by applicable law.

We apply this legal basis only where our interests are not overridden by your fundamental rights and freedoms.

Consent

We rely on consent where required, including for:

newsletters or marketing sent to persons where no statutory customer exception applies;
certain marketing activities; and
non-essential cookies and similar technologies where consent is required.

Consent is voluntary and can be withdrawn at any time.

Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

4. Whether You Must Provide Personal Data

Certain personal data is necessary for us to enter into or perform a contract.

For example, we normally require sufficient information to:

identify the customer;
process payment;
deliver the order;
issue required accounting documents; and
provide purchased digital content or services.

If required information is not provided, we may be unable to accept or fulfil the order.

Information requested solely on the basis of consent is voluntary unless otherwise clearly stated.

5. Sources of Personal Data

Most personal data is provided directly by you when you:

place an order;
create an account;
subscribe to a service;
register for an event;
contact us; or
choose cookie or marketing preferences.

We may also receive limited information from service providers involved in a transaction, such as:

payment confirmation from a payment provider;
delivery or customs status from a carrier;
account or platform information generated during use of our websites.

Technical data may be generated automatically when you use our websites.

6. Recipients and Service Providers

We disclose personal data only where necessary for the purposes described in this Privacy Policy or where required by law.

Recipients may include the following categories.

E-Commerce and Hosting Providers

Our websites and online-store functionality are provided using Wix and associated infrastructure and service providers.

Payment Providers

Depending on the payment method offered and selected, payment information may be processed by providers such as:

Stripe;
PayU;
PayPal; or
other payment providers displayed during checkout.

Payment providers may process certain data as independent controllers for their own legal, fraud-prevention and payment-processing obligations.

Shipping and Logistics Providers

Where necessary to deliver an order, relevant data may be provided to the selected carrier or logistics provider, which may include providers such as:

FedEx;
UPS;
Australia Post;
USPS;
Packeta;
Czech Post; or
another carrier used for the relevant destination.

Only information reasonably necessary for delivery, customs clearance and related services is provided.

IT, Cloud, Email and Support Providers

We may use service providers for:

hosting;
technical infrastructure;
email delivery;
transactional communications;
newsletters;
security;
customer support;
data storage and backup.

Analytics and Advertising Providers

Where analytics, advertising or similar non-essential technologies are used, relevant providers may receive data only in accordance with applicable cookie and data-protection requirements.

The specific providers and technologies currently used are identified through the relevant Cookie Settings or cookie information available on the websites.

Professional Advisers

Personal data may be provided where necessary to:

accountants;
tax advisers;
auditors;
lawyers;
insurers; and
other professional advisers.

Public Authorities

Personal data may be disclosed to courts, tax authorities, customs authorities, law-enforcement bodies or other public authorities where required by law.

7. International Transfers of Personal Data

Some of our service providers or their infrastructure may be located outside the European Economic Area (EEA).

Where personal data is transferred outside the EEA, we use a transfer mechanism permitted by applicable data-protection law.

Depending on the destination and provider, this may include:

a European Commission adequacy decision;
standard contractual clauses approved by the European Commission;
another legally recognised safeguard; or
a statutory exception applicable to the particular transfer.

Where required, additional measures are used to protect transferred data.

Information concerning the relevant transfer safeguards, including how to obtain further information or a copy where legally available, may be requested at: support@polymerweek.com

8. Data Retention

We retain personal data only for as long as necessary for the purpose for which it is processed and for any additional period required or permitted by applicable law.

Orders and Contracts

Order and contract records are retained for the duration necessary to:

perform the contract;
process returns or complaints;
establish, exercise or defend legal claims; and
comply with statutory record-keeping obligations.

Accounting and Tax Records

Invoices, tax documents and other records subject to mandatory accounting, VAT or tax-retention requirements are retained for the periods required by applicable law.

Customer Accounts and Memberships

Account data is normally retained while the account or membership remains active and afterwards only for as long as reasonably necessary for legal, contractual, security or record-keeping purposes.

Customer Support and Complaints

Customer-support communications and complaint records are retained for the period necessary to resolve the matter and, where appropriate, for the relevant limitation period or other legally justified period.

Marketing

Where marketing is based on consent, relevant data is processed until:

consent is withdrawn; or
the data is no longer required for the marketing purpose.

Where direct marketing is based on an existing customer relationship or legitimate interest, it is processed until the customer objects or the relevant legal basis no longer applies.

We may retain a minimal suppression record after an unsubscribe or objection where necessary to ensure that the person is not contacted again contrary to their request.

Cookies and Technical Data

Retention periods for individual cookies and similar technologies are described in the Cookie Settings or associated cookie information.

Security and technical logs are retained only for the period reasonably necessary for security, troubleshooting and legal purposes.

9. Cookies and Similar Technologies

Our websites use cookies and similar technologies.

Essential Cookies

Essential or strictly necessary technologies may be used without consent where permitted by applicable law.

These technologies are used for purposes such as:

website operation;
shopping-cart functionality;
checkout;
account sessions;
security;
fraud prevention;
remembering privacy preferences.

Analytics, Advertising and Other Non-Essential Technologies

Analytics, advertising and other non-essential cookies or similar technologies that require prior consent are not activated before the required consent has been given.

You may accept or reject non-essential categories using the Cookie Settings available on the websites.

Refusing non-essential cookies does not prevent access to the basic website and online-store functionality.

Withdrawal of Cookie Consent

Where processing is based on consent, consent may be withdrawn at any time.

Withdrawing or changing cookie consent must be possible through the Cookie Settings available on the websites.

Withdrawal does not affect processing that was lawfully carried out before consent was withdrawn.

Detailed Cookie Information

The current list of relevant cookies and similar technologies, including their:

provider;
purpose;
category; and
retention period

is available through the Cookie Settings or related cookie information on the relevant website.

Browser settings may also allow cookies to be deleted or blocked, but browser settings do not replace the consent mechanism provided on our websites where prior consent is legally required.

10. Marketing Communications

Existing Customers

Where permitted by applicable law, we may use electronic contact details obtained in connection with a customer relationship to send commercial communications concerning our own similar products or services.

Customers are provided with a clear and free means of objecting to such communications.

Other Recipients

Where prior consent is required, marketing communications are sent only after the required consent has been obtained.

Opt-Out

You may unsubscribe or object to direct marketing at any time by:

using the unsubscribe mechanism included in the marketing communication; or
contacting support@polymerweek.com.

Once a valid objection to direct marketing has been received, the relevant personal data will no longer be processed for that direct-marketing purpose.

11. Your Data-Protection Rights

Subject to the conditions and limitations provided by applicable law, you may have the following rights.

Right of Access

You may request confirmation whether we process your personal data and obtain access to relevant personal data and information concerning its processing.

Right to Rectification

You may request correction of inaccurate personal data and completion of incomplete data.

Right to Erasure

You may request deletion of personal data where the statutory conditions for erasure are satisfied.

The right to erasure does not apply where continued processing is required or permitted by law, including for legal obligations or legal claims.

Right to Restriction

You may request restriction of processing where the statutory conditions are satisfied.

Right to Data Portability

Where the statutory conditions apply, you may request personal data you provided to us in a structured, commonly used and machine-readable format or request its transmission to another controller where technically feasible.

Right to Object

Where processing is based on legitimate interests, you may object to that processing on grounds relating to your particular situation.

You may object to processing for direct marketing at any time.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw consent at any time.

Right to Lodge a Complaint

You have the right to lodge a complaint with the competent data-protection supervisory authority.

12. Exercising Your Rights

Requests concerning personal data may be sent to: support@polymerweek.com

We may request information reasonably necessary to verify your identity before responding to a request.

Requests are handled within the time limits required by applicable data-protection law.

13. Data Security

We use appropriate technical and organisational measures intended to protect personal data against:

unauthorised access;
unlawful processing;
accidental loss;
destruction;
alteration; and
unauthorised disclosure.

No internet-based system can guarantee absolute security.

14. Changes to This Privacy Policy

We may update this Privacy Policy where necessary to reflect:

changes to our services;
changes to service providers;
changes to processing activities; or
legal or regulatory requirements.

The current version and its date will be published on the relevant websites.

Where required by law, material changes will be communicated separately.

15. Supervisory Authority

The competent Czech supervisory authority is:

Office for Personal Data Protection
(Úřad pro ochranu osobních údajů – ÚOOÚ)

Pplk. Sochora 27
170 00 Prague 7
Czech Republic

Email: posta@uoou.gov.cz
Website: uoou.gov.cz

16. Contact

For privacy-related questions or requests: